To Catch a Ratter - Monitoring the Behavior of Amateur DarkComet RAT Operators in the Wild

Explore a comprehensive analysis of amateur DarkComet Remote Access Trojan (RAT) operators' behavior in this 18-minute IEEE conference talk. Delve into the findings of a large-scale study that monitored 2,747 interactive sessions, revealing insights into operator motives, intentions, and procedures. Learn about the versatility of RATs, their increasing use in various malicious activities, and the gaps in understanding that this research aims to fill. Discover the experimental setup using honeypot environments, the reconstruction of operator action sequences, and the common patterns observed, including remote desktop interactions, video and audio capture, keystroke logging, and data exfiltration. Gain valuable knowledge about potential weak points in RAT operations and discuss the implications for developing more effective defense strategies against these threats.